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OVERVIEW: Who We Are 


verizonwireless 


The Law Enforcement Resource Team (LERT) is responsible for 
coordinating and processing all requests from local, county, 
state and federal law enforcement agencies throughout the 
country. LERT is a centralized group operating from a single 


location, but covering the entire country. 
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MISSION STATEMENT: Our Goals 


verizonwireless 


e Respond to all lawful process for business and 
customer information. 


e Provide assistance to law enforcement personnel 
and members of the legal community in a 
professional, Knowledgeable and expeditious 
manner. 


e Maintain the privacy and security of our business 
and customer information. 


¢ Provide informational presentations for law 
enforcement organizations and associations to 
further demonstrate our commitment and support 
of the public safety community. 
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\ aie ee RESPONSIBILITIES: What We Do 


¢ Confidentially respond to proper legal process served on 
Verizon Wireless in compliance with all applicable statutes 
and internal policies 


e Provide technical assistance for electronic surveillances ona 
24-hour basis 


e Provide public safety support for all exigent and emergency 
situations 24x7x365 


e Ensure technical and procedural CALEA compliance 


¢ Coordinate appearance and testimony for Custodian of 
Records 


e Provide external outreach to our public safety partners and 
law enforcement associations 
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lamer see GENERAL INFORMATION 


Company Cellco Partnership d/b/a Verizon Wireless 
Name 


Verizon Wireless 

NFeliiiatemens ATTN: Custodian of Records 
PNelelgesssuae = 180 Washington Valley Rd 
Bedminster, NJ 07921 


STU 7 AM to 8 PM 7 Days a Week 
mOleles 
Exigent 24x7x365 Staffed On-Site 
Situations 
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Director: LERT 


Associate Director: LERT |e 
Manager: LERT- CALEA_ |e 
Sr. Analyst: LERT-CALEA |e 


Supervisor: LERT Co 


urt 


Orders/Exigent Situations |e 


Supervisor: LERT 
Subpoenas & Search 
Warrants 


Confidential and proprietary material for authorized Verizon Wireless 


Kimberly Brown: 908-306-7899 
Debra Ennis: 908-306-7790 
Susan Connelly: 908-306-7786 
Brian Marcus: 908-306-7548 
Mark Denton: 908-306-7785 
John Profaca: 908-306-7789 


Bernie Newman: 908-306-7787 
Joseph Newman: 908-306-7788 


CONTACT US: Hotline Prompt Menu 


veriZonwireless 


LERT Hotline: 800-451-5242 
@ General Information 


© Subpoena Compliance Team: subpoenas and 
warrants not seeking content or location information 


Court Order Compliance Team: surveillances, court 
% order requests, warrants seeking content or location 


© Exigent and Emergency Situations: 
24x/xX365 
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verizonwircless- 


_ CONTACT US: Fax Numbers 


pee st > r= 3 = 


LERT maintains separate fax numbers for different legal process 


Group | Function Fax Number 


Subpoena Compliance Team ° 888-667-0028 
Court Order Compliance Team: 
pursuant to court orders and ¢ 888-667-0026 


warrants for content and/or location 


Court Order Compliance Team: 


: ¢ 908-306-7487 
electronic surveillance 


Exigent and Emergency Situations | * 800-345-6720 


Law Enforcement Resource Team 
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ORGANIZATION: Our Teams 


verizonwircless 


LERT is divided into two teams each responsible 
for processing and coordinating Verizon Wireless’ 
response to legal process, law enforcement 
requests and public safety emergencies. These 
teams are: 


Court Order 
Compliance 


Subpoena 
Compliance 
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SUBPOENA TEAM: Responsibilities 


verizonwireless 


e Responsible for all subpoenas served on Verizon Wireless 
— Subpoena Duces Tecum 
— Administrative 
— Civil Subpoenas 


e Responsible for search warrants served on Verizon Wireless not seeking 
content and/or location information 


¢ Coordinate appearance of Verizon Wireless Custodian of Records 
¢ Team Goals: 
— Respond to all legal process within 14 days or timeframe specified in process 


— Accommodate emergency or urgent requests the same or next day (volumes 
permitting) — there is no charge to expedite a request 


Law Enforcement Resource Team 
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verizonwireless 


COURT ORDER TEAM: Responsibilities 


e Staffed on-site 24x7x365 


¢ Responsible for: 


Provisioning, maintaining and troubleshooting surveillances 
Processing pursuant to court order requests 
Providing support for exigent and emergency situations 


Processing requests (pursuant to legal process or exigent request) seeking 
location-based information (cell sites) and available electronic communications 
content (text messages and PixPlace content) 


e« Team Goals: 


Exigent and Emergency Situations- respond immediately upon receipt 
Electronic Surveillance Orders: provision and confirm same day 


Pursuant to Court Order Requests: process within 48 - 72 hours 


Law Enforcement Resource Team 
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Subscriber 


Social Security 
Number 


Features 


ESN or MEID 


Payment History 


Confidential and proprietary material for authorized Verizon 


Name, address, contact numbers, activation/deactivation 
dates and account number 


The SSN of the subscriber (not available for pre-paid 
accounts unless provided by customer) 


List of account features active for the target number 


Electronic Serial Number or Mobile Equipment Identifier- 
this is the device identifier and is unique to the device 


Date, amount and source of payments made for a 
particular account 


Wireless personnel only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 


Tolls 


Call Detail Records 


Media Message 
Detail Records 


IP Session Report 


IP Source- 
Destination Report 


Mobile IM Report 


Cell Site Location 


Date/time, call duration, all numbers dialed by the target number 
and unrestricted phone numbers calling into the target 


Same as tolls, but includes restricted numbers calling into the 
target 


Date/time, origination/termination address, attachment type, 
message size and GMT offset of all media messages (MMS) 


Server, connection start/end timestamp, target number, market 
SID, session IP address and bytes transferred/received 


Date/time of connection, source IP address, destination IP address, 
data transfer direction and bytes transferred/received 


Connection start/stop timestamp, target number, session duration 
and messaging service name 


Indicates the tower and antenna sector that processed mobile 
activity to and from the target number- available for IP Session and 
Call Details only 
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Subscriber- post paid 


Call Details (with or without cell 
sites) 


Text Message Details 
Text Message Content 

IP Session Information 

IP Destination Information 
Picture Message Details 
Media Content 


Bill Copies- post paid 
Payment History- Post Paid 
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3-5 Years (may vary by legacy company) 
365 Rolling Calendar Days 


365 Rolling Calendar Days 

3-5 Days (never more than 10 days) 
365 Rolling Calendar Days 

60 Days 

365 Rolling Calendar Days 


PixPlace only (customer can add or delete 
content at any time) 


Last 12 Months 


3-5 Years (may vary by legacy company) 


verizonwircless — 


ITION PERIOD: ORE Records 
splat 


ee 


Timeframe for which other record types exist in our systems: 


Retention Period 


Bill Copies (over 12 months | 4 ¢ Vears (may vary by legacy company) 


old) 

Check Copies Approximately 6 Months 

Credit Card Numbers Approximately 6 Months 

Store Surveillance Videos — | Typically 30 Days 

Service Applications 3-5 Years (may vary by legacy company) 
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e Many device manufacturers include certain memory or storage capabilities 
as part of the device’s features. 

¢ Memory capabilities may allow the end-user to store information on the 
device’s physical memory independently of our network. 


This content is controlled by the device’s end-user, not Verizon Wireless 


Confidential and proprietary material for authorized Verizon Wireless personnel only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 


CALEA: The Basics 


verizonwireless 


Overview of Verizon Wireless CALEA capabilities: 


¢ Communications Assistance for Law Enforcement Act 


e LERT is centralized and responsible for the surveillance of devices 
utilizing the Verizon Wireless network 


¢ Verizon Wireless Delivery Functions (DF) and the various Intercept 
Access Points (IAP) are geographically diverse for load-sharing and 
redundancy 


e Delivery Methods: 
— Circuit Switched Audio: dial-out from all switch platforms 


— Data Delivery: VPN or Frame Relay 


Law Enforcement Resource Team 
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CALEA: Services 


verizonwireless 


CALEA services available: 


¢ Switched Services 
— Include Nortel (Ericsson) and Lucent 


— Call identifying information, call content, short message service dial-up data 
and WAP 1.0 are subject to surveillance from the switch or an adjunct platform 


¢ Broadband Services 
— Verizon Wireless provides lawful intercept for broadband services 


— The IAPs provide the DF a copy of all packets to and from the target based on 
the IP assigned to the target 


Law Enforcement Resource Team 
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\ ee CALEA: Packet Switched 


CALEA surveillance solutions for packet data: 
e Web-based services are intercepted the same as broadband services 
e Push-to-Talk over cellular services (POC) 


— Verizon Wireless offers PoC services to subscribers provided the target’s 
device is PoC capable. 


— Verizon Wireless provides a lawful intercept solution for PoC 


— Intercepted the same as any other service using the packet data network as 
its transport 


— TIA-1072 formatting applied at DF 


Law Enforcement Resource Team 
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\ ee ae CALEA: Solution Timeline 


Requirement FCC target date Verizon Wireless 
Completion 


Circuit Switched: 

e« June 30, 2002 ¢ Second Quarter of 2002 
J-STD-025 
Punchlist Capability: 

e« June 30, 2004 e May of 2004 
J-STD-025A 
Packet Data: 

e May 14, 2007 e March of 2005 
J-STD-025B 
Push to Talk over Cellular: 

e May 14, 2007 « December of 2006 
TIA-1072 
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\ ee CALEA: Court Ordered Surveillance 


e Fax required worksheet along with court order 
— Names of authorized points of contact 
— Address (street, city, state and zip code) 


— Billing contact name and number 


e All court orders must have a complete Electronic Surveillance worksheet 
with set-up and billing information when faxed in order to be processed in 
a timely manner 


¢ Provisioning state court orders outside of the state’s boundaries is not 
permissible unless the order contains verbiage extending the order’s 
jurisdiction out of state. Examples of such language are: 


— Without or no geographical limitation 


— Within the boundaries of the U.S 


Law Enforcement Resource Team 
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EXIGENT AND EMERGENCY SITUATIONS 


veriZoMmwireless 


LERT’s procedures: 


Our policy is designed to facilitate the speedy and lawful 
Overview ® transmission of critical and/or life saving information to law 


enforcement and public safety agencies 


LERT hotline is staffed 800-451-5242, prompt 
” 24x7xX365 WW) nar 


@ 911 is dialed 
G Verizon Wireless is served with an Exigent Letter in 
Disclosure 9 accordance with applicable state or federal laws 
) Law enforcement or public safety personnel complete 
and execute our Emergency Information Request form 


Law Enforcement Resource Team 
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Verizon Wireless will perform a call back verification to an officer/agent or 
PSAP to verify the caller’s identity if the call to 911 is not yet visible in our 
systems or there is no fax machine available at the time. We will request 
the Emergency Information Request form be completed and returned 
when possible. 


911 calls DO NOT require completion of the Emergency Information 
Request form 


Verizon Wireless does not determine what is or is not an exigent situation. 
lf 911 was not dialed, Verizon Wireless will require the submission of our 
Emergency Information Request form. 


Verizon Wireless does not charge for information or services provided 
pursuant to the Emergency Information Request form or a 911 call. 
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=a 


verizonwireless 


EXIGENT: Our Emergency Form 


Record types you may 


request from Verizon 
Wireless 


You may request records 
based on current and 


past usage, as well as 
indicate that future 
usage will be necessary 


we 


7 TO: Cellco Partnership d’b‘a Verizon Wireless 
H ATTN: 
veriZonwireiess PHONE, (800) 451-5242, press “4” 
FAN: (908) 306-7501 


RE: Cellular No. 


Thereby certify that: a oe 
(1) Fam a law enforcement officer authorized by applicable law to request the following information: 


(2) There is an immediate danger of death or serious physical injury to a person requiring that the information below 
be provided without wailing for a court order. and 


(3) (fF ] am requesting a pen register or wirdap surveillance, [ certify that a court order could be entered 
authorizing the interception requested below and that my agency will obtain a court order approving this interception 
within 48 hours. 

Accordingly. I request (check information requested and specify time frame for which it is requested): 


Phone number on which 


information is requested 


Type of 
Information 


Historical 
Information 


Future / 
Real-time Into 


Time Frame for Which 


Provide the timeframe 
during which your 
emergency took place 
(i.e. Subject missing for 
last 48 hours) 


Incoming and Outgoing Calls 
Date, Time & Phone Numbers) 


lemel Activity 
(Date, Time, Destination 1P} 


Voieemail Pass Code Reset 


Other Information or Service Change Requests (describe in detail): 


Provide your information and 


sign the form 


Requesting Investigative or Law Enforcement Officer: 
Name: 


Rank: Title: 
Law Enforcement Agency: 

Dispatcher ‘ Badge Number (if applicable): 
Address: 


By signing this form, I swear that all the facts contained herein are true: 


Requesting Officer signature: Date: 
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EXIGENT: Emergency Surveillance 


verizonwireless 


Overview of emergency electronic surveillance: 


¢ Verizon Wireless will initiate an exigent pen register / trap and trace and/or 
communications intercept for a target number upon receipt of an 
Emergency Information Request form and an Electronic Surveillance 
worksheet 


e Exigent surveillance of a target is valid for 48 hours; beyond which an 
authorizing court order is required to continue surveillance 


e The Emergency Information Request form contains the appropriate check 
boxes to request initiation of a surveillance 


Law Enforcement Resource Team 
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¢ Old equipment not assigned a mobile number are referred to as 
uninitialized. These devices are typically only able to dial 911. E911 
protocol dictates routing of these calls to the closest PSAP via the best 
signal offered by any carrier. 


e Uninitialized devices often appear with 911 as the area code. The 
remainder of the digits are portions of the device’s serial number. 


¢ Verizon Wireless will attempt to locate the 911 event on our network. We 
can provide location of the tower handling the last call. If the device is 
recognized by our network (i.e. it was once active under a Verizon 
Wireless-assigned number) we will also search our subscriber database to 
locate the most recent subscriber who utilized the device, however, this 
individual may no longer have possession of the phone. 
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EXIGENT: Uninitialized Equipment 


veriZomMmwireless 


Issues related to uninitialized equipment (911 area code): 


Requlator FCC regulations require wireless E911 protocol routes these 
gt ¥ @ carriers to provide service to any @ calls to the PSAP via the best 
Requirement device dialing 911 signal offered by any carrier 


The remainder of the digits 


G Uninitialized devices often appear ) are portions of the device’s 


911 area code : 
with 911 as the area code saral number 


Initial G Verizon Wireless will attempt to locate the event on our network 
Process and try and extract the full electronic serial number on the device 
System Y Our systems only record 911 events for uninitialized devices 

Requirement compatible with our network technology 
What We Location of the tower handling Subscriber information on 
© the 911 call @ the most recent subscriber 


Can Provide 


who utilized the device 
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¢ Cell site, sector and approximate distance for each voice, SMS and data 
event originating or terminating from/at a device interfacing with our 
network for either the last three to five days or one thousand transactions. 


¢ Cell site and sector information is available for completed calls for a rolling 
365 rolling days. 


¢ 911 calls originating on the Verizon Wireless network are Phase II 
compliant. However, output is dependent on the answering point’s 


equipment or if the device calling was produced before current wireless 
E911. 


e Events on our network must complete and/or terminate before location- 
based information is available in our systems (information on calls or 
messages in progress Is not available if the mobile number is unknown). 
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CELL SITES: The Basics 


verizonwireless 


Cell site 101: 


¢ Verizon Wireless is a CDMA (Code Division Multiple Access) provider. 

¢ Our network records the cell tower utilized by a device at the start of the 
event. 

¢ Our devices select the tower to utilize based on signal strength and 
quality; there is a relationship between proximity and tower selection. 

e¢ The cell site location and corresponding data related to the device’s 
position from the tower is the location-based service our network records 
and maintains. 


Law Enforcement Resource Team 
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CELL SITES: Sectors 


verizonwircless 


e Sectors correspond to the different 
sides of a cell antennae. 
e The number of sides may vary, but 


VZW typically deploys 3-sided Alpha Sector 
towers. Default Azimuth: 0 degrees 
é Lucent: Sector 2 
e 3-sided sectors broadcast over CCRC 
120 degrees. 
¢ Cell site lists will provide the z = 
sector number and Azimuth which | ~27s oeta 
Sector Sector 
is center point of the tower. Cell DEraRIR Default 
sites can vary in the number Azimuth: 240 Azimuth: 
© Sect ded with . degrees 120 degrees 
ectors are coded with a numeric einer ee 
or character code indicating the Sector 4 Sector 3 
Nortel: Sector Nortel: 
sector. 3 Sector 2 


e There are two separate switching 
platforms that display sectors 
differently 


Law Enforcement Resource Team 
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RTT: Real Time Tool 


verizonwireless 


Estimated distance to tower: 


¢ Real Time Tool (RTT) is a system performance tool which gauges a 
target’s distance from the cell site for all mobile events occurring on our 
network. 


e Three formats based on our Lucent, Nortel, and Motorola switching 
systems. 


« Data Is in real time from the end of the event- I.e. termination of call or 
delivery of data packet. 


¢ Data retained by this tool has a short lifespan- only the last one thousand 
events or three to five days (whichever is reached first) is available. 


e RTT reports are not standard business records. 


¢ Depending on the switching platform, the report will display for entire 
markets and single switches. 


Law Enforcement Resource Team 
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Call 


os Date * oe Length Dialed Digits Subscriber # 
# Time 
(sec) 

6  4Apr 7:53:50 65.4 9084488669 
6  2-Apr 17:27:54 77.6 9084488669 
6 1-Apr 12:25:42 62.4 9083067491 9084488669 
6 Apr 12:24:53 25.9 9083067491 9084488669 
6  31-Mar 17:38:14 25.8 | 9083067491 9084488669 
6 31-Mar 16:02:07 59 #777 9084488669 
6  31-Mar 10:20:25 i #777 9084488669 


explanation of columns 


Switch #- most Lucent RTT report are for multiple switch 
markets 


Date the event based on the device’s interaction with the 
network 


Time of the event based on the device’s interaction with 
the network 


Starting with the access time, the event's length in 
seconds 


Digits dialed by the target for a voice call. Data usage 
will appear as #777. Field blank for SMS 


Number on which the report was run 


Type 


Term 
Orig 
Orig 
Term 
Term 
Orig 


Entry Tech Init = Init ioe Calling Party 
Type Cell Sector (mi) Number 
SMS | 168 3 1.1 | 9083067501 
SMS | 292 2 0 
3GV 293 1 0.3 
3GV 293 i) 0.8 9083067501 
3GV 138 1 0.6 9083067501 
3GD 14 1 0.8 
3GD 3 i 1.9 


Orig 


Direction of the event: 
TERM2= inbound | ORIG= outbound 


Type of event: 
3GV- 2GV= Voice | SMS= Text | 3GD= Data 


Cell Site used to initiate the event 


Sector indicator for the cell site used to initiate the event 


Estimated distance from cell site for the event [based on 
signal timing] 


Digits from inbound events- may not populate all events 
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verizonwireless 


RTT: Sample Report for Nortel Markets 


Record End Call Start 


Date* 
8-Apr 
8-Apr 
8-Apr 
8-Apr 
8-Apr 
8-Apr 
8-Apr 


Record End 
Date 


Call Start 
Time 


Call 
Duration 


Tech Type 


MEID/ESN 


Entry Type 


Call Tech MEID/ESN Entry Init InitCell Init Init 1 Act 
Time Duration Type* Type* MTX* Num* Sector* Set RTD 
16:36:37 1 SMS _ a000001807c1e3 Orig 3 481 1 2.4 
16:36:07 2 SMS _ a000001807c1le3 Term, 3 323 1 3 
16:35:14 1 SMS _ a000001807c1e3 Orig 3 347 3 5 
16:34:40 1 SMS aQ00001807c1e3 Term 3 481 1 2.4 
16:30:19 1 SMS _ a000001807cle3 Term, 3 323 1 3 
16:07:47 1 SMS _ a000001807c1e3 Term 3 323 1 3 
16:07:31 1 SMS _ a000001807c1e3 Orig | 347 3 3.6 


Explanation of Columns 


Date of the event based on the device’s interaction with 


the network Init MTX 


Time of the event based on the device’s interaction with 


Init Cell Num 
the network 


Starting with the access time, the event's length in 
seconds 


Type of event: 
3GV- 2GV= Voice | SMS= Text | 3GD= Data 


Init 1 Act Set 
RTD 


Report is run by ESN or MEID not by target number; 
these are the serial numbers of the device 


Direction of the event: 
TERM2 inbound | ORIG= outbound 


MTX number identifies the switch number 


Cell Site used to initiate the event 


Sector indicator for the cell site used to initiate the event 


Sector indicator for the cell site used to initiate the event 


Estimated distance from cell site for the event (based on 
signal timing) 
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RTT: Sample Report for Motorola Markets 


veriZoMmwireless 


Date Access Release Call Tech Dialed ESN Entry Access Access Access Access 
i Time Time Length* Type* Digits Type CBSC_ BTS __ Sector Dist* (mi) 
8-Apr 15:16:03 15:16:04 4: 3GV 3364566179 a0000015f88990 Orig 502 303 uf 0.61 
8-Apr 15:13:34 15:13:36 2 SMS a0000015f88990 Term) 502 303 1 0.76 
8-Apr 15:13:02 15:13:24 22 SMS a0000015f88990 Orig | 502 303 1 0.76 
8-Apr 15:11:44 15:11:49 5 3GV 3362550015 | a0000015f88990 Orig 504 312 2 5.53 
8-Apr 15:10:59 15:11:21 22 SMS a0000015f88990 Orig 502 303 1 0.61 


Explanation of Columns 


Report is run by ESN or MEID not by target number; these 
are the serial numbers of the device 


Date of the event based on the device’s interaction 
: MEID/ESN 
with the network 


Direction of the event: 
TERM= inbound | ORIG= outbound 


Access Time of the event based on the device’s interaction 


Time with the network Entry Type 


Release 


é CBSC indicates the network element the BTS is homed 
Time Time of the event’s conclusion based on the Access CBSC 


off; however Motorola reports are single-switched 


Starting with the access time, the event's length in 


Access BTS BTS indicates the cell site used to initiate the event 
seconds 


Call Length 


Type of event: 


3GV- 2GV= Voice | SMS= Text | 3GD= Data y-Xele-\-t-yesl-\ee)@m Sector indicator for the cell site used to initiate the event 


Tech Type 


Dialed Digits dialed by the target for a voice call. Data usage Access Estimated distance from cell site for the event [based on 
Digits will appear as #777. Field blank for SMS Distance signal timing] 


Confidential and proprietary material for authorized Verizon Wireless personnel only. Use, disclosure or distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 34 


alled # ESN zr 

103607662 

* 86 6103607662| 44| 

10360766 610360943 

10360766 610360943 

10360943 610360766 
6 


2 
2 
8 
8 
Z 
10360766 103609438] 334 
2 
2 
2 
2 
9 
6 


Switch Date ——-«|Time_ —_—s*{[Orig C/G |Term C/G [Dir |MDN 
Plymouth_Meeting2 
Branchburgl 10360766 
Branchburgl 10360766 
Plymouth_Meeting2 610360766 


alO 


NINININININ 
(e)) 
CO;|NIN 


ite) 
00] 00} N 


Tn 


, 


Ke) 
N 
S|S/S/S|S|S/S|/S/E/S/S/8 
O}O}O/O}4/O;7)4 
ie) 
H 
i) 
W 
fe)) 
2) 
SN 
fe) 


190 O 


6 
6 


N 
Ke) 
N 
o)) 


Branchburg1 7/12/2006] 16:07:42 610360766 
Branchburgl 7/11/2006| 18:09:39 6 
Branchburg1 7/11/2006] 15:31:31 610360766 


i 


3 
083067788|2a0ab6c3 | 6103607662| 98] 
3 | 2 


6 
083097788] 2a0ab6c3 | 610360766 
6 
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Explanation of Columns 


Telco Equipment that routs the call- several hundred 


cell sites are homed off each of our switches Number dialed by the target during an outbound 

Date of call Electronic Serial Number of MDN 

Time of the call’s start [when the target his SEND or an Calling Part Number- digits of the caller for an inbound 
inbound call first rung to the target] call 


Cell site indicator for each call. Cell sites are valid for 
INBOUND and OUTBOUND calls only on this report. Duration of the call in seconds 
Sector will appear in a separate column 


Estimated distance from cell site for the event [based on 


Call direction indicator ; a 
signal timing] 


Target for which the report was run 
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IMSG_SND_DT_TM__|MSG_DLVR_DT_TM_|ORIG_ADDR___|[DEST_ADDR 
610360766 
610360766 610360766 
6103607662 610360766 
610360766 
610360766 
610360766 
610360766 


610360943 
6103607662 610360943 
6103607662 610360766 
6103607662 610360766 
610360766 610360766 


6/13/2006 8:12 6/13/2006 8:12 1111] 610360766 


Explanation of columns 


Target for which report is run Date and time message registered on network as 
being sent 

Date and time message is delivered to the Sender of message- may come from internet or 

recipient address another phone number 


Destination or recipient number of message 
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ELEMENT | CALL START | EVNT STOP |MBL_IP ADDR|SID|MSCID|CELL]| MDN | GMT START 
AAA04ROCA | 6/30/2008 7:44 | 6/30/2008 8:21 |75.204.165.228| 80| 2 | 300 [9089309080] 6/30/2008 11:44 


AAAO04ROCA | 6/30/2008 15:20 | 6/30/2008 16:00] 75.205.207.121| 80 | 2 | 300 |9089309080] 6/30/2008 19:20 
AAAD4ROCA | 6/30/2008 21:57 | 6/30/2008 22:46] 75.205.241.1 | 80} 2 | 300 |9089309080] 7/1/2008 1:57 
AAAO4ROCA| 7/1/2008 21:15 | 7/1/2008 22:15 | 75.207.161.57 | 80} 2 | 300 |9089309080| 7/2/2008 1:15 


explanation of columns 


AAA server routing the IP traffic at event's 


Start times of the session [local time for device at start 
start 


of session] 


Stop times of the session [local time for 


Dynamic IP address assigned to device for 
device at start of session] 


individual session 
Location Code: market System ID Location Code: switch number 


Location Code: cell site number Target for which report is run 


GMT offset of session’s start time 
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a SAMPLE REPORT: IP Destination Report 


verizonwircless 


Conn Start Conn Stop Source IP Dest IP Address IP Bytes From IP Bytes To First Packet 
Date/Time Date/Time Address Mobile Mobile Direction 


Toescsen | ooneasza | enmwoasze | rozsasize | soamenns | 9 [0 | fomtte 
Foescsen | ooneasza | enmworsze | rozasiz | sons | oo [0 | romaine 


MDN 


explanation of columns 


Target for which report is run Conn Start Start time of each event. Each event within the session is 
Date/Time recorded as a separate line item 


Mobile IP address assigned to target for session- this will 
Conn Stop Stop time of each event. Each event within the Source IP be a constant for the duration of the session. Individual 
Date/Time session is recorded as a separate line item Address sessions will be noted on this report by the changed 
Source IP Address 


CRC Amount of data transferred from mobile device to hosting 
Mobile systems at the source IP address in KB 


Destination IP 
Address 


IP Bytes To Amount of data transferred from hosting systems lcieec(a<imee Indicates initiation of event; either occurring because of 
Mobile at source IP address to mobile device in KB Direction the device sending a packet to the source IP or vice versa 
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IP address target visits for the event 


er SAMPLE REPORT: PoC Report 


verizZonwireless 


Push to Talk over Cellular: example of our display format 


Inbound PTT 
PTT Call Start Outbound Octet Control 
sID Target MDN Source MDN Date/Time Octet Cnt User Name Switch 
PTT_Ann 10/21/2008 9086250473 
apolisJct -1 -1 15:37 @vzw3g.com | anjtmdah 
PTT_Plym 10/21/2008 9086250473 WMTPP 
outhMtg 22 9086250473 | 9089302020 15:32 @vzw3g.com | AAA 


Switch 


PTT_Ann 
apolisJct 


PTT_Ann 
apolisJct 


-1 
10/21/2008 9086250473 
-1 -1 14:31 @vzw3g.com | anjtmdah 
10/21/2008 9086250473 
-1 -1 14:31 @vzw3g.com | anjtmdah 


PTT_Ann 
apolisJct 


- 10/21/2008 9086250473 
9086250473 | 9086250473 14400 11:38 @vzw3g.com | anjtmdah 


Law Enforcement Resource Team 
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OUTSIDE RESOURCES 


verizonwirecless 


Helpful web-based resources: 


Website Focus 


Registry for internet numbers 


Free NPA/NXX search to determine if a targetisa 
landline or wireless number 


w.verizonwireless.com | Equipment manuals and user guides 


www.npac.com Number portability administration center 


Government website for CALEA- law enforcement 
credentials required but registration is free 


Law Enforcement Resource Team 
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EMERGENCY INFORMATION REQUEST 
TO: Cellco Partnership d/b/a Verizon Wireless 


ATTN: 
PHONE: (800) 451-5242, press “4” 
FAX: (800) 345-6720 

RE: Cellular No. 


I hereby certify that: 
(1) Iam a law enforcement officer authorized by applicable law to request the following information; 


(2) There is an MMMediate danger of death or serious physical injury to a person 


requiring that the information below be provided without waiting for a court order; and 

(3) If I am requesting a pen register or wiretap surveillance, I certify that a court order could be entered 

authorizing the interception requested below and that my agency will obtain a court order approving this interception 

within 48 hours. 
*The latitude and longitude measurements on the Real Time Tool “RTT” report are derived solely from the Round Trip Delay 
measurement. They are best estimates and are not related to any GPS measurement. Measurements with a high confidence 
factor may be more accurate than measurements with a low confidence factor, but all measurements contained on this report 
are the best estimates available rather than precise location. 
Accordingly, I request (check information requested and specify time frame for which it is requested): LAST 48 HOURS 


Type of Historical Future / Time Frame for Which 
Information Information Real-time Info Information Requested 
Subscriber Information UO LU 
(current) 
* Location Information CO 


Incoming and Outgoing Calls 
(Date, Time & Phone Numbers) 


O 


Pen Register/Trap & Trace 
beyond 48 hours requires order O 


Call Content (i.e. wiretap) 
beyond 48 hours requires order 


O 


Text Message Activity 
(Date, Time, Sender & Recipient) 


Text Message Content 


Internet Activity 
(Date, Time, Destination IP) 


O yO jo 


Voicemail Pass Code Reset 


O 


Other Information or Service Change Requests (describe in detail): 


Requesting Investigative or Law Enforcement Officer: 

Name: Rank/Title: 

Law Enforcement Agency: Phone: 
Dispatcher / Badge Number (if applicable): Fax: 
Address: 

Email Address: 

By signing this form, I swear that all the facts contained herein are true: 
Requesting Officer Signature: Date: 


Updated 10-17-2011 


Verizon Wireless 
Electronic Surveillance Worksheet 
This worksheet MUST be completed and provided with each court order served on Verizon Wireless. Failure to provide this 
information will result in a delay or the inability of Verizon Wireless to comply with your request. (The original sheet may be faxed 


with renewal orders as long as all of the information is still correct.) 


Court Orders and forms should be submitted to: 


Cellco Partnership d/b/a Verizon Wireless Phone: (800) 451-5242 select prompt “3” 
Attn: Court Order Compliance Faxes: (888) 667-0026 & 800-267-9129 
180 Washington Valley Road 

Bedminster, NJ 07921 Date submitted: 


Technical Contact Information 


Agency name: 


Agent name: Agent Contact Number: 


Other authorized Point(s) of Contact: 
(VZW will only discuss the Order with those listed as contacts. Please ensure all contacts are listed for this Order) 


Billing Information (Provide name address and contact information for billing purposes) 


Contact name: Contact number: 


Contact fax number: 


Account billing name: 


Account billing address: 


Street address City State Zip 


Relevant Billing information: 
(VZW will provide the last 4 digits of the target on the invoices, please note any additional information required by your agency.) 


Surveillance Information Target Number: 

[ ] NEW [ ] RENEWAL [_] DISCONNECT ONLY 
Type of Surveillance 

T™ PR/TT [™ Content/PR/TT T™ Location T™ sms 
Services 

M Circuit Switch ™ poc T™ Data 

Connection 

DM Circuit Switch CFID: IP: Port# 
Tl poc CFID: IP: Port# 
TX Data CFID: IP: Port# 
Audio Delivery number(s): / 


Switch(es) to be provisioned or geographic area to be covered: 


Additional comments or requests: 


VZW Proprietary 


